Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
File: Sd2PGmKl1_gCEt4PPv51svozj_4.mft (raw, json)
Hash identifier: o+TKi5pQ9vuUMztvV8FgndSVdzPfP+9sT2dUIHO6/QQ=
Subject key identifier: BB:6B:C2:6F:B0:FC:DB:85:36:26:F6:04:E4:0B:8D:05:12:BC:5E:90
Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Certificate serial: 019CAAD00CCD43F5E0FEDDDC831D1264626A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
Manifest number: 0F04
Signing time: Sun 01 Mar 2026 19:11:27 +0000
Manifest this update: Sun 01 Mar 2026 19:11:27 +0000
Manifest next update: Mon 02 Mar 2026 19:11:27 +0000
Files and hashes: 1: J3ftbOoSMnWM1c7-tR371h6c2b0.roa (hash: wWCLwRHU1jrHGvG1xPKaED3mEcz7ye7TepNN+uTqE+U=)
2: Sd2PGmKl1_gCEt4PPv51svozj_4.crl (hash: OaA79yBchjKE0p/iOCt5yJjEVEyf32RbtM4uH/qWBtA=)
3: V78nEVrkCr-6qVq2YThSOW0v9hQ.roa (hash: xNhsyzIzttzlPtpbDSsbaMS/afTumd4QgcW09/sybCo=)
4: lVdlxcxfdOR97rVV-G0B9HJjtEk.roa (hash: X9flFhDc02YE6B0+b27kP29DD32mLA6vv1jvb9r/lds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:d0:0c:cd:43:f5:e0:fe:dd:dc:83:1d:12:64:62:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Validity
Not Before: Mar 1 19:11:27 2026 GMT
Not After : Mar 2 19:11:27 2026 GMT
Subject: CN=bb6bc26fb0fcdb853626f604e40b8d0512bc5e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:90:4b:7b:0a:e7:90:51:b8:36:8e:27:80:48:
0d:17:bd:0f:38:d2:42:2f:a4:2e:a2:96:4f:17:a1:
ac:ab:cc:bd:70:64:ac:27:2a:bd:a6:4b:61:62:c0:
92:eb:ba:a1:69:55:32:7a:da:21:15:47:2b:69:8a:
0c:99:ca:dd:53:d6:f0:ab:19:2a:5c:f2:36:3f:f9:
26:8b:ef:b0:ac:02:56:e4:80:b8:36:13:2f:58:69:
e1:19:d7:d1:de:66:c8:83:c3:1e:4a:9c:c1:04:6a:
6b:1a:be:16:f1:89:f7:83:42:eb:f9:66:8a:d5:a2:
03:fe:ad:d0:4d:78:c8:5b:43:3a:ce:9d:71:93:03:
8f:ed:97:24:21:c8:06:cc:7d:1a:e5:21:50:57:a8:
8c:19:50:67:d2:c2:aa:b3:9e:e7:a6:f7:be:cc:f7:
e0:66:0f:91:c6:3c:af:9e:76:66:4c:be:2e:5d:61:
41:c4:56:bf:93:b0:24:e2:45:18:f2:9b:0f:be:87:
0c:e7:24:4c:31:52:ad:c0:b4:13:eb:ee:e5:a6:5b:
1e:76:17:d6:59:8a:37:7e:25:61:d8:56:6f:43:1e:
b2:34:f3:e4:64:a0:9b:c2:b6:01:4c:67:1e:f8:e7:
be:c4:6c:68:bd:8b:1c:98:72:45:f3:dd:bc:dd:fc:
86:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6B:C2:6F:B0:FC:DB:85:36:26:F6:04:E4:0B:8D:05:12:BC:5E:90
X509v3 Authority Key Identifier:
keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:6e:96:6c:a4:20:f4:05:87:73:03:3a:93:61:b7:5a:98:74:
c3:72:9e:d7:a8:1a:bc:c7:28:ea:af:c3:b7:43:cd:9b:8a:b8:
59:a5:68:c7:bf:b2:aa:8e:9d:36:94:5b:48:2e:61:83:d7:7f:
dc:ea:46:08:f4:03:06:91:ef:31:c4:1b:b4:66:c8:40:a9:81:
60:f3:3b:27:11:ce:0f:0d:68:0e:49:da:80:7e:95:1f:6b:76:
1c:5c:23:ed:ad:15:dd:b5:20:6b:ce:a0:97:3b:a1:be:b6:fa:
fe:8d:56:1e:ed:30:09:7c:63:2a:fa:f7:8e:d2:7d:8f:b7:44:
3f:34:27:ca:aa:6b:7f:57:43:e3:bc:29:f2:11:aa:90:f7:91:
c2:8f:e1:ad:57:0c:3f:d5:34:35:fa:f6:5d:93:42:ad:20:18:
9b:cd:8f:3c:2e:7d:78:1d:61:67:f5:39:fd:66:45:95:b6:52:
f5:84:78:cc:83:ae:a6:0a:ca:e4:c8:d1:6f:af:af:fb:50:82:
a7:65:d9:89:4d:7f:f7:7f:85:91:29:c5:1c:90:8d:15:5a:c0:
23:b2:40:1e:ae:02:13:08:8c:8b:c5:e3:49:5a:ec:81:36:bf:
aa:a4:96:26:b1:43:65:22:15:3a:f8:dc:29:ac:d0:91:ac:7f:
19:6b:17:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:32 2026 by rpki-client